Hello, I am newbie and i just installed OSSEC local in my VMware. I have read most of the rules and how it works but for time being I would like to try it on my default configuration.
I have been trying to run a scan on my ubuntu server but i am not being able to do that. I have searched but i can only find it how do it on agent. I have installed a rootkit on my ubuntu server and i have modified ls. Now just want to detect those changes but I am not being able to run a scan which you evetually scan and notify me about changes. I have started my ossec-control and after that i'm hopeless i didn't understand what to do. I just find information on agents and server. Please do help me.
